一种基于多级流表的中间件服务链的部署方法

doi:10.11959/j.issn.1000-0801.2015205

Abstract

Abstract:

Aiming at the path cycle and source address binding problem in middlebox service chain deployment，a service chain deployment approach by combining the OpenFlow mechanism and NetFPGA was proposed.First of all，the OpenFlow multi-flow table was used for marking service chains and labeling service sequences so that data packets could be processed correctly according to desired service order；secondly，the service chain deployment algorithm was designed to achieve the mapping relationship between the service path and flow table rules；thirdly，a prototype system was implemented based on the hardware platforms of NetFPGA-10G.Finally，experimental results show that the proposed method have the advantage of feasibility and outperforms compared methods in the aspect of the flow table number and time overhead.

Key words: software defined networking, middlebox, service chain, multi-flow table

Shiran Liu,Julong Lan,Yuxiang Hu,Tong Duan. A Deployment Method of Middlebox Service Chain Based on Multi-Flow Table[J]. Telecommunications Science, 2015, 31(8): 19-29.

Figures/Tables 14

References 18

1	Boucadair M ， Jacquenet C ， Parker R ，et al. Service Function Chaining： Framework ＆Architecture. Internet-Draft draftboucadair-sfc-framework-00，IETF Secretariat， 2013
2	Srisuresh P ， Kuthan J ， Rosenberg J ，et al. Middlebox Communication Architecture and Framework. RFC3303， 2002
3	Joseph D A ， Tavakoli A ， Stoica I . A policy-aware switching layer fordata centers. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Chicago，USA， 2008
4	Gill P ， Jain N ， Nagappan N . Understanding network failures in data centers： measurement，analysis，and implications. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Toronto，Canada， 2011
5	Sekar V ， Ratnasamy S ， Reiter M ，et al. The middlebox manifesto： enabling innovation in middleboxdeployment. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Toronto，Canada， 2011
6	Sherry J ， Hasan S ， Scott C ，et al. Making middleboxes someone else’s problem： networkprocessing as a cloud service. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Helsinki，Finland， 2012
7	Gember A ， Krishnamurthy A ， John S S ，et al. Stratos：A Network-Aware Orchestration Layer for Virtual Middleboxes inClouds. TechReport， 2014
8	Qazi Z A ， Tu C C ， Chiang L ，et al. SIMPLE-fying middlebox policy enforcement using SDN. Proceedings of Association for Computing Machinery’s Special Interest Group on Data Communications， Hong Kong，China， 2013
9	Zhang Y ， Behe N ， Beliveau L ，et al. StEERING：asoftware-defined networking for inline service chaining. Proceedings ofthe 21st IEEE International Conference on Network Protocols（ICNP 2013）， Gottingen，Germany， 2013
10	Seyed K F ， Chiang L ， Sekar V . Enforcing network-wide policies in the presence of dynamic middlebox actions using flow tags. Proceedings of Networked System Design and Implementation， Seattle，USA， 2014
11	Halpern J ， Pignataro C . Service Function Chaining（SFC） Architecture. Internet-Draft draft-ietf-sfc-architecture-07，IETF Secretariat， 2015
12	Quinn P ， Nadeau T . Service Function Chaining Problem Statement. Internet-Draft draft-ietf-sfc-problem-statement-13，IETF Secretariat， 2015
13	OpenFlow1.1.OpenFlowswitch specification 1.1.0. ， 2011
14	OpenFlow1.0，OpenFlowswitch specification 1.0.0. ， 2009
15	Sekar V ， Egi N ， Ratnasamy S ，et al. Design and implementation of a consolidated middlebox architecture. Proceedings of Networked System Design and Implementation， San Jose，USA， 2012
16	NetFPGA-10G project. ， 2014
17	OpenFlow1.3，OpenFlowswitch specification 1.3.0. ， 2012
18	Ryu controller project. ， 2014

Metrics

Recommended 0

No Suggested Reading articles found!

IngressPort	Fwd
src₁	S₃
S₃	FW
FW	S₃

IngressPort	Fwd
S₃	IDS
IDS	S₃
S₃	下一跳

IngressPort	元数据	指令
S₁	0101	metadata：0101→0100；Fwd：IDS₁
IDS₁	0100	metadata：0100→0000；Fwd：S₁
S₁	0000	Fwd：下一跳

IngressPort	标签	元数据	指令
S₁	1	0101	metadata：0101→0100；Fwd：IDS₁
IDS₁	1	0100	metadata：0100→0000；Fwd：S₁
S₁	1	0000	Fwd：下一跳
S₁	2	0101	Fwd：下一跳

符号	含义
SR	服务路径
S	交换机节点
M	中间件节点
S_m-S_i-S_n	该序列表示SR中3个相连的交换机，如图1中S₁-S₃-S₂
S_i-M_k-S_i	该序列中表示SR与中间件M_k相连的交换机S_i与M_k构成的序列
Modify（M）	集合Modify（M）表示该网络中所有会修改数据分组头的中间件的类型的集合，由管理员定义
basic_table	基本转发表
SC_table	服务链转发表
M（SR）	SR中所有中间件节点
map（M（SR））	SR上中间件到服务顺序编码的映射，由管理员定义

A Deployment Method of Middlebox Service Chain Based on Multi-Flow Table

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 14

References 18

Related Articles 15

Metrics

Recommended 0

策略P	服务路径SR	部署方式	往返时延/ms
H₁-NAT-FW-H₂	｛S₁-NAT₁-S₁-S₃-S₅-FW₁-S₅｝	基于源IP地址	∞
H₂-H₁	｛S₅-S₃-S₁｝
H₁-NAT-FW-H₂	｛S₁-NAT₁-S₁-S₃-S₅-FW₁-S₅｝	基本转发表和服务链表	0.61
H₂-H₁	｛S₅-S₃-S₁｝
H₁-FW-NAT-H₂	｛S₁-S₃-S₅-FW₁-S₅-S₃-S₁-NAT₁-S₁-S₃-S₅｝	基本转发表和服务链表	0.83
H₂-H₁	｛S₅-S₃-S₁｝

[1]	Yinghui LIU,Nan LIU,Yixin CAI,Yunyong ZHANG,Jinwu WEI. Design of the strategy and architecture of different enterprises’ middle platform [J]. Telecommunications Science, 2020, 36(7): 126-135.
[2]	Xiaohui YAO,Qing LI,Kunkun SUN. A domain adaptive hybrid genetic algorithm and its verification in security service function chain orchestration [J]. Telecommunications Science, 2020, 36(5): 16-24.
[3]	Tianjiao CHEN,Jiang LIU,Tao HUANG. Application of artificial intelligence in network orchestration system [J]. Telecommunications Science, 2019, 35(5): 9-16.
[4]	Li XIAO,Zhilin YUAN,Chengpeng FU,Weidong MA. Intelligent metro optical networks and key optical components [J]. Telecommunications Science, 2019, 35(4): 33-40.
[5]	Dongshan WANG,Yue MA,Yan LI,Jian GAO,Zhibin YIN. Coordinated and unified control technology of IP and optical transport network for power services [J]. Telecommunications Science, 2019, 35(3): 116-121.
[6]	Jiang ZHOU,Hewu LI. A general way to assign IPv6 trusted address under portal authentication [J]. Telecommunications Science, 2019, 35(12): 8-14.
[7]	Yuan ZHANG. Architecture and key technologies of network on demand for small and medium enterprises [J]. Telecommunications Science, 2018, 34(7): 7-14.
[8]	Cui ZHONG,Lei WANG,Xing LUO. SDN solutions for cloud data center [J]. Telecommunications Science, 2018, 34(7): 15-22.
[9]	Jun BI,Chen SUN,Heng YU. NFP:enabling network function parallelism in NFV [J]. Telecommunications Science, 2018, 34(7): 41-48.
[10]	Bin ZHUGE,Yihang QI,Hanwen FU,Weiming WANG. Network resource pricing strategy based on SDN framework [J]. Telecommunications Science, 2018, 34(7): 49-61.
[11]	Fengchao FU,Peng WANG,Yu MAO,Yongmei HUANG,Xiaobing GAO,Aihua ZHANG,Guoqiang LIN. Realization of vOLT and development trend [J]. Telecommunications Science, 2018, 34(7): 157-161.
[12]	Yanbin SHI,Qi YU,Xiaojun XIE. Operation support system blue print and evolution strategy for SDN/NFV [J]. Telecommunications Science, 2018, 34(6): 171-182.
[13]	Zhifeng LIU,Xia YIN,Zhiliang WANG,Xingang SHI,Yiqiang HUA,Xiaohong HUANG,Liang WEI,Jiangyuan YAO,Han ZHANG,Man ZENG,Zijun SU,Shuai LIU. Design and construction of hierarchical and cross-regional SDN verification and demonstration system [J]. Telecommunications Science, 2018, 34(11): 21-30.
[14]	Liyue CHEN,Yangdan NI,Xiaoyun KONG,Sheng ZHOU,Hui HUANG,Xing ZHENG. Design and performance analysis of a SDN-based intelligent and collaborative Honeynet for mobile networks environment [J]. Telecommunications Science, 2018, 34(11): 156-165.
[15]	Fang DONG,Ou LI,Youquan MO. A reconstruction algorithm of service path for mobile Ad Hoc network based on SDN [J]. Telecommunications Science, 2018, 34(10): 1-8.